GHSA-cfv6-4v53-fff6: Duplicate Advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability

Published Nov 10, 2026

Updated

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-x8x8-p968-x646. This link is maintained to preserve external references.

Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Affected Software

2 affected components

nuget/microsoft.netcore.app.runtime.win-x86>=8.0.0<8.0.34

nuget/microsoft.netcore.app.runtime.win-x86>=8.0.0

Event History

Nov 10, 2026

Advisory Published

via GitHub·09:33 PM

Data Sourced

via GitHub·09:33 PM

DescriptionSeverityWeaknessAffected Software

Nov 11, 2026

Withdrawn

via GitHub·12:39 AM

Frequently Asked Questions

Should this advisory be tracked as a separate vulnerability?

No. This advisory was withdrawn on 2026-11-11 because it duplicates GHSA-x8x8-p968-x646. Use the duplicate advisory for current vulnerability and remediation information.

What impact was described in the original advisory?

The original description reported a heap-based buffer overflow in Visual Studio that could allow an unauthorized attacker to execute code over a network. The listed CVSS vector indicates network reachability, low attack complexity, no required privileges, and required user interaction, with high confidentiality, integrity, and availability impact.

GHSA-cfv6-4v53-fff6: Duplicate Advisory: Microsoft Security Advisory CVE-2026-118745 - Visual Studio Remote Code Execution Vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this advisory be tracked as a separate vulnerability?

What impact was described in the original advisory?

Company

Resources

Contact

Frequently Asked Questions

Should this advisory be tracked as a separate vulnerability?

What impact was described in the original advisory?